Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/pzp8crLsBRPf1MvixKUGlf-sSFk.roa
File: pzp8crLsBRPf1MvixKUGlf-sSFk.roa (raw, json)
Hash identifier: xWWeABgz6ncDbxJL/BN2IlJX33PkMQViuQ6CmqdZFkc=
Subject key identifier: A7:3A:7C:72:B2:EC:05:13:DF:D4:CB:E2:C4:A5:06:95:FF:AC:48:59
Certificate issuer: /CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Certificate serial: 019F47D22B491817B32D22B03AD8AA4571DC
Authority key identifier: 17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/pzp8crLsBRPf1MvixKUGlf-sSFk.roa
Signing time: Thu 09 Jul 2026 16:59:43 +0000
ROA not before: Thu 09 Jul 2026 16:59:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60262
IP address blocks: 2a12:600::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:47:d2:2b:49:18:17:b3:2d:22:b0:3a:d8:aa:45:71:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Validity
Not Before: Jul 9 16:59:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a73a7c72b2ec0513dfd4cbe2c4a50695ffac4859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1b:99:c3:fe:5e:06:e6:d1:76:9b:74:37:d3:
b8:89:72:57:a1:e4:36:f3:0c:a7:a1:cb:c4:71:2e:
41:71:78:41:94:8e:26:e9:e4:81:29:08:37:42:8b:
cc:6d:35:9c:87:f2:e3:74:77:7f:2d:02:26:d9:78:
e7:22:91:78:d4:27:dd:9f:b6:ac:d8:64:d4:a2:92:
a0:6d:bd:7a:e5:e2:c1:36:24:c6:6d:24:94:6a:43:
b4:e8:c0:96:69:4c:e0:10:af:6b:f0:aa:c7:d5:2d:
2e:94:ab:ae:4a:1e:9c:a5:96:3e:32:b7:cc:23:a9:
73:10:bd:c0:92:98:f0:1b:8c:2b:4e:17:3d:79:1a:
04:8e:81:15:af:fc:74:68:ce:b1:08:19:ef:70:d4:
d4:ac:75:ec:8c:c6:ff:35:64:93:b3:fe:8e:d3:43:
22:9b:f1:98:40:f0:9e:f7:54:0d:37:2b:ad:89:4a:
bb:67:a0:eb:17:02:86:90:ab:f5:b8:89:ae:9c:b5:
04:a0:e7:fa:b3:6f:5c:f2:96:71:bb:ca:e3:f3:2c:
a1:16:7f:16:e9:a2:dd:91:38:2a:8c:f9:cc:f0:b6:
ce:aa:6a:57:8e:be:ad:53:62:89:76:eb:20:40:c9:
c3:73:14:7d:8f:82:d9:1a:94:35:bd:c0:27:e7:2f:
e2:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:3A:7C:72:B2:EC:05:13:DF:D4:CB:E2:C4:A5:06:95:FF:AC:48:59
X509v3 Authority Key Identifier:
keyid:17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/pzp8crLsBRPf1MvixKUGlf-sSFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:600::/29
Signature Algorithm: sha256WithRSAEncryption
83:2c:20:94:62:41:7e:a8:cb:6b:b7:53:6e:26:ec:c1:e0:73:
b5:b9:dd:8b:b6:da:04:eb:fe:c5:a7:9c:4a:29:0f:3f:d8:85:
16:fd:fd:f7:e6:34:1a:53:34:79:88:69:4d:c8:89:90:60:e9:
bf:f9:7e:a3:97:d7:52:55:54:0c:33:19:90:83:ee:54:44:26:
04:a4:b6:d8:c2:d1:8a:3f:99:33:c0:47:36:22:22:5f:db:5f:
fb:33:dd:b3:1f:de:a1:e9:87:1c:5f:f6:ff:5e:48:c8:04:a2:
9c:45:cb:3a:7b:c1:6d:aa:a0:f7:24:2f:72:b1:f7:4d:94:66:
f1:3d:71:e8:fd:bb:bd:90:15:c2:98:45:f6:48:18:77:2d:a3:
48:92:ac:e2:8a:95:16:11:20:d5:f7:7e:3d:3e:52:1c:2e:38:
9a:62:09:e0:ed:b5:49:c9:3b:d7:17:d8:27:3d:bc:b7:1d:e9:
a4:b0:88:83:57:55:34:a6:75:ec:8a:90:28:42:26:b2:80:3a:
ea:16:ff:1d:45:5d:cb:4e:4e:e2:e8:ee:64:a5:5a:67:b8:a4:
98:94:40:74:42:7f:06:d3:d6:05:79:8f:5b:1a:8f:2a:67:c3:
f4:04:47:d0:a1:27:f8:05:4e:c4:7a:b9:55:dd:9f:eb:d6:1e:
c5:21:ae:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:36:35 2026 by rpki-client